Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/352e3138312e3138332e302f32342d3234203d3e20383334.roa
File: 352e3138312e3138332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: Y5a0aovNvbK3PaO3Q+YAQBuoquxDRNO1xlpVS2k5mfE=
Subject key identifier: 75:BE:A2:46:8C:C4:E2:41:E6:A7:97:93:EE:CD:E2:AE:0B:C7:2D:72
Certificate issuer: /CN=bad36cdaf43498a668b553f581ccd281ac1a8cd7
Certificate serial: 6002EE0BA0531FAAB43FBC858F0AA3501907C9B9
Authority key identifier: BA:D3:6C:DA:F4:34:98:A6:68:B5:53:F5:81:CC:D2:81:AC:1A:8C:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/utNs2vQ0mKZotVP1gczSgawajNc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/352e3138312e3138332e302f32342d3234203d3e20383334.roa
Signing time: Fri 25 Aug 2023 00:00:05 +0000
ROA not before: Thu 24 Aug 2023 23:55:05 +0000
ROA not after: Fri 23 Aug 2024 00:00:05 +0000
asID: 834
IP address blocks: 5.181.183.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:02:ee:0b:a0:53:1f:aa:b4:3f:bc:85:8f:0a:a3:50:19:07:c9:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bad36cdaf43498a668b553f581ccd281ac1a8cd7
Validity
Not Before: Aug 24 23:55:05 2023 GMT
Not After : Aug 23 00:00:05 2024 GMT
Subject: CN=75BEA2468CC4E241E6A79793EECDE2AE0BC72D72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:da:a7:80:8d:fa:48:23:05:ca:b1:1e:49:1a:
b8:ad:82:7a:29:fd:cb:78:50:07:92:d9:39:b7:03:
05:44:49:d1:41:e6:d2:78:37:5d:21:88:e1:f3:e2:
9b:a6:78:30:ee:b4:a5:cf:e7:e2:f8:16:85:05:9b:
f4:1e:31:38:9d:d6:ef:64:1f:21:c2:44:d4:00:0e:
bb:23:aa:f1:35:82:cd:3d:66:63:ab:fc:19:9a:33:
05:7f:6a:cc:b7:2d:8e:b2:f1:2c:53:af:b3:95:bb:
29:5f:d5:8a:7e:6d:31:22:e9:c4:af:1e:f2:60:81:
d8:23:08:7b:ed:56:3e:78:d9:bd:bb:b2:cd:e6:27:
13:6f:e9:60:49:f3:9f:4b:7e:fb:6f:cf:2d:f3:6e:
87:8a:2c:54:66:b3:9d:5b:5f:ea:92:ac:dc:d8:77:
9d:dc:2b:1a:39:31:1b:53:f2:ae:8f:9c:47:fa:84:
07:28:12:e3:e1:bd:41:17:44:80:67:9c:db:4d:27:
a3:85:ed:d0:db:dd:b8:9a:03:b5:e8:d8:8a:1e:8b:
fd:02:04:58:b9:00:c9:7d:d9:b6:c5:81:e5:61:7e:
75:dd:b0:79:0c:6a:79:7c:1b:9f:cd:53:a7:00:03:
3f:f4:e4:4a:d2:99:33:be:a2:22:a9:e6:51:53:d0:
af:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:BE:A2:46:8C:C4:E2:41:E6:A7:97:93:EE:CD:E2:AE:0B:C7:2D:72
X509v3 Authority Key Identifier:
keyid:BA:D3:6C:DA:F4:34:98:A6:68:B5:53:F5:81:CC:D2:81:AC:1A:8C:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/BAD36CDAF43498A668B553F581CCD281AC1A8CD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/utNs2vQ0mKZotVP1gczSgawajNc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/352e3138312e3138332e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.183.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:fb:bf:c3:d0:e8:90:31:13:26:ca:03:f8:c3:41:f0:17:c9:
4c:a2:08:e4:91:72:4d:1e:51:c6:5b:84:bc:7c:ea:ce:dd:fc:
c7:a7:a6:86:82:7c:92:bb:d8:13:24:90:3f:06:f0:a8:2a:f7:
67:0b:5f:15:dd:65:1e:49:01:33:a4:36:0e:d0:55:28:bf:89:
77:a5:8a:02:9a:b5:56:05:5d:67:54:9a:ba:bd:dc:e3:55:dc:
58:28:55:de:fe:91:59:14:6f:5b:6a:ce:3d:a1:4c:4f:78:c4:
91:29:7d:61:af:c7:58:6e:b7:7a:1e:69:32:62:9d:94:66:1e:
34:9c:89:f3:dd:8a:30:c9:67:03:2a:eb:05:1c:f2:c0:21:cb:
2f:cc:42:cf:48:a0:0f:4a:20:f8:84:be:f7:5b:70:c3:9d:b6:
59:36:ac:95:6b:67:0f:6b:f1:0a:b1:06:01:b6:7e:07:1e:7a:
0d:6e:41:e2:92:86:b4:2c:5e:69:3b:25:ba:05:03:04:ea:88:
64:22:42:ea:46:32:79:60:2e:84:ed:e5:99:ce:75:69:58:ef:
09:b2:e4:e5:10:1a:78:06:37:8a:d3:9a:58:37:cf:88:03:f6:
b3:14:98:c7:8e:ca:8f:89:29:f1:07:45:47:99:a1:a7:3c:75:
9c:f9:41:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 25 20:49:02 2024 by rpki-client on console-fra.rpki-client.org